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DETAILED ACTION 
Drawings 

1 . The drawings are objected to as failing to comply with 37 CFR 1 .84(p)(4) 
because reference character "51" has been used to designate both "useM" and "key 
pair" (fig. 3, page 17, lines 18-19). Corrected drawing sheets in compliance with 37 
CFR 1.121(d) are required in reply to the Office action to avoid abandonment of the 
application. Any amended replacement drawing sheet should include all of the figures 
appearing on the immediate prior version of the sheet, even if only one figure is being 
amended. Each drawing sheet submitted after the filing date of an application must be 
labeled in the top margin as either "Replacement Sheet" or "New Sheet" pursuant to 37 
CFR 1.121(d). If the changes are not accepted by the examiner, the applicant will be 
notified and informed of any required corrective action in the next Office action. The 
objection to the drawings will not be held in abeyance. 

2. The drawings are objected to as failing to comply with 37 CFR 1 .84(p)(5) 
because they include the following reference character(s) not mentioned in the 
description: 43, 46, 47, 52, 55, 56 (fig. 3), 105 (fig 13). Corrected drawing sheets in 
compliance with 37 CFR 1 .121(d), or amendment to the specification to add the 
reference character(s) in the description in compliance with 37 CFR 1.121(b) are 
required in reply to the Office action to avoid abandonment of the application. Any 
amended replacement drawing sheet should include all of the figures appearing on the 
immediate prior version of the sheet, even if only one figure is being amended. Each 
drawing sheet submitted after the filing date of an application must be labeled in the top 
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margin as either "Replacement Sheet" or "New Sheet" pursuant to 37 CFR 1 .121(d). If 
the changes are not accepted by the examiner, the applicant will be notified and 
informed of any required corrective action in the next Office action. The objection to the 
drawings will not be held in abeyance. 

3. The drawings are objected to because figure 7 shows "encryption algorithm" 92, 
while the specification describes "decryption algorithm" 92. Corrected drawing sheets in 
compliance with 37 CFR 1.121(d) are required in reply to the Office action to avoid 
abandonment of the application. Any amended replacement drawing sheet should 
include all of the figures appearing on the immediate prior version of the sheet, even if 
only one figure is being amended. The figure or figure number of an amended drawing 
should not be labeled as "amended." If a drawing figure is to be canceled, the 
appropriate figure must be removed from the replacement sheet, and where necessary, 
the remaining figures must be renumbered and appropriate changes made to the brief 
description of the several views of the drawings for consistency. Additional replacement 
sheets may be necessary to show the renumbering of the remaining figures. Each 
drawing sheet submitted after the filing date of an application must be labeled in the top 
margin as either "Replacement Sheet" or "New Sheet" pursuant to 37 CFR 1 .121(d). If 
the changes are not accepted by the examiner, the applicant will be notified and 
informed of any required corrective action in the next Office action. The objection to the 
drawings will not be held in abeyance. 
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Specification 

4. The abstract of the disclosure is objected to because it exceeds 150 words in 
length. Correction is required. See MPEP § 608.01(b). 

Applicant is reminded of the proper language and format for an abstract of the 
disclosure. 

The abstract should be in narrative form and generally limited to a single 
paragraph on a separate sheet within the range of 50 to 150 words. It is important that 
the abstract not exceed 1 50 words in length since the space provided for the abstract 
on the computer tape used by the printer is limited. The form and legal phraseology 
often used in patent claims, such as "means" and "said," should be avoided. The 
abstract should describe the disclosure sufficiently to assist readers in deciding whether 
there is a need for consulting the full patent text for details. 

The language should be clear and concise and should not repeat information 
given in the title. It should avoid using phrases which can be implied, such as, "The 
disclosure concerns," "The disclosure defined by this invention," "The disclosure 
describes," etc. 

5. The disclosure is objected to because of the following informalities: "ROM", 
"EEPROM" (page 13, line 21), "PGP" (page 16, line 16). While well known in the art, 
these terms have not been defined. 
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Claim Rejections - 35 USC §112 

6. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

7. Claim 27 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

Claim 27 recites the limitation "from the storage means " in page 10, line 7. There 
is insufficient antecedent basis for this limitation in the claim. 

Claim Rejections - 35 USC § 103 

8. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

9. Claims 1-2, 5, 7-15, 19-21, 27 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Wiegley (US Patent Number: 6,711,677). 

Regarding claim 1, Wiegley teach a receiving step of receiving a target public key 
corresponding to a target device (column 4, lines 30-35); an obtaining step of obtaining 
a user-specific key pair from a secure registry (column 4, lines 47-65); a key encrypting 
step of using a user-specific private key from the user-specific key pair to create a target 
key verifier based on the target public key (column 4, lines 47-65); a storing step of 
storing the target key verifier and the target public key in a storage area (column 4, lines 
47-65); a retrieving step of retrieving the target key verifier and the target public key 
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from the storage area (column 5, lines 4-15); a verification step of applying a user- 
specific public key from the user-specific key pair to the target key verifier for verifying 
the authenticity of the target public key (column 4, lines 47-65). Wiegley teaches a data- 
encrypting step of encrypting data (column 4, lines 57-60) using a session key, and 
encrypting the session key using the printer's public key (column 4, lines 52-55). 
Wiegley does not expressly disclose a data encrypting step of encrypting data with the 
target public key, in the case that the authenticity of the target public key is verified, 
thereby creating encrypted data for transmission to the target device. Therefore, it 
would have been obvious to one having ordinary skill in the art at the time the invention 
was made to encrypt the data using the printer's public key. One of ordinary skill in the 
art would have been motivated to do so because it was well known in the art to use a 
receiver's public key to encrypt a message destined to said receiver. 

Regarding claim 2, Wiegley does not expressly disclose wherein the user- 
specific key pair is obtained from a key function call which is supported by an operating 
system executing in the computing device. However, Examiner takes Official Notice that 
the use of function calls supported by an operating system is conventional and well 
known. Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to use a key function call which is supported by an 
operating system executing in the computing device since Examiner takes Official 
Notice that the use of function calls supported by an operating system is conventional 
and well known. 
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Regarding claim 5, Wiegley does not expressly disclose creating an encrypted 
version of the target public key. Wiegley does teach receiving the public key and a 
session identifier, and creating an encrypted version of the session key (column 4, lines 
30-60). Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to encrypt the target public key instead of the session 
key identifier. One of ordinary skill in the art would have been motivated to do so 
because it was well known in the art to use a receiver's public key to encrypt a message 
destined to said receiver. 

Regarding claim 7, Wiegley teaches wherein the verification step includes 
decrypting the target key verifier with the user-specific public key using a decryption 
algorithm (column 5, lines 4-24). 

Regarding claim 8, Wiegley teaches wherein the verification step further includes 
using a key verification algorithm to compare the decrypted target key verifier to the 
target public key for verifying the authenticity of the target public key (column 5, lines 4- 
24). 

Regarding claim 9, Wiegley does not expressly disclose wherein the verification 
step is performed by a verification function call which is supported by an operating 
system executing in the computing device. However, Examiner takes Official Notice that 
the use of function calls supported by an operating system is conventional and well 
known. Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to use a verification function call which is supported by 
an operating system executing in the computing device since Examiner takes Official 
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Notice that the use of function calls supported by an operating system is conventional 
and well known. 

Regarding claim 10, Wiegley does not expressly disclose wherein the target key 
verifier created in the key encrypting step is a digital signature of the target public key. 
However, Wiegley teaches computing a hash value for the session key and the. session 
identifier and encrypting it using the printer's public key (column 5, lines 48-67, column 
6, lines 1-50). Therefore, it would have been obvious to one having ordinary skill in the 
art at the time the invention was made to compute a hash value or digital signature. One 
of ordinary skill in the art would have been motivated to do so because it was well 
known in the art to use digital signatures for providing assurance that there has been no 
modification of a message since it was digitally signed. 

Regarding claim 11, Wiegley does not expressly disclose wherein the digital 
signature of the target public key is created by applying a hashing algorithm to the 
target public key to obtain a target key hash, and then encrypting the target key hash 
with the user-specific private key using an encryption algorithm. However, Wiegley 
teaches computing a hash value for the session key and the session identifier and 
encrypting it using the printer's public key (column 5, lines 55-62). Therefore, it would 
have been obvious to one having ordinary skill in the art at the time the invention was 
made to compute a hash value and encrypting it. One of ordinary skill in the art would 
have been motivated to do so because it was well known in the art to use digital 
signatures for providing assurance that there has been no modification of a message 
since it was digitally signed. 
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Regarding claim 12, Wiegley does not expressly disclose wherein the digital 
signature of the target public key is created by applying a hashing algorithm to the 
target public key to obtain a target key hash, and then subjecting the target key hash to 
a security algorithm. However, Wiegley teaches computing a hash value for the session 
key and the session identifier and encrypting it using the printer's public key (column 5, 
lines 55-62). Therefore, it would have been obvious to one having ordinary skill in the 
art at the time the invention was made to compute a hash value and encrypting it. One 
of ordinary skill in the art would have been motivated to do so because it was well 
known in the art to use digital signatures for providing assurance that there has been no 
modification of a message since it was digitally signed. 

Regarding claim 13, Wiegley teaches wherein the verification step includes 
decrypting the target key verifier with the user-specific public key using a decryption 
algorithm to obtain a decrypted target key hash (column 6, lines 14-27). 

Regarding claim 14, Wiegley does not expressly disclose wherein the verification 
step further includes reapplying a hashing algorithm to the target public key to obtain a 
new target key hash and using a hash verification algorithm to compare the decrypted 
target key hash to the new target key hash for verifying the authenticity of the target 
public key. However, Wiegley teaches computing a hash value for the session key and 
the session identifier, decrypting the hash value received, and comparing the values 
(column 6, lines 14-27). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to reapply a hashing algorithm to the 
target key and to verify the hash value by comparing the decrypted hash to the new 
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hash value. One of ordinary skill in the art would have been motivated to do so to further 
verify authenticity of the data received. 

Regarding claim 15, Wiegley does not expressly disclose wherein the verification 
step is performed by a verification function call which is supported by an operating 
system executing in the computing device. However, Examiner takes Official Notice that 
the use of function calls supported by an operating system is conventional and well 
known. Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to use a verification function call which is supported by 
an operating system executing in the computing device since Examiner takes Official 
Notice that the use of function calls supported by an operating system is conventional 
and well known. 

Regarding claim 19, Wiegley teaches wherein the target device is a printer 
(column 4, lines 30-45). Wiegley does not expressly disclose that the target public key is 
a printer public key. However, Wiegley does teach sending a session identifier and the 
printer public key to the device. Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to use the printer public key 
instead of the session identifier. One of ordinary skill in the art would have been 
motivated to do so because it was well known in the art to use a receiver's public key to 
encrypt a message destined to said receiver. 

Regarding claim 20, Wiegley teaches wherein, in the receiving step, the printer 
public key is received in response to a key request sent to the printer (column 3, lines 
62-67, column 4, lines 1-20). 
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Regarding claim 21, Wiegley teaches wherein the method is performed in a 
printer driver executing on the computing device (column 3, lines 40-56). 

Regarding claim 27, Wiegley teach an information apparatus which transmits 
encrypted data to a target device, the information apparatus securely storing a public 
key for encryption of the data and utilizing a user-specific key pair which is securely 
stored in the apparatus, comprising: receiving means for receiving a target public key 
corresponding to a target device (column 4, lines 30-35); obtaining means for obtaining 
a user-specific key pair from a secure registry (column 4, lines 47-65); key encrypting 
means for using a user-specific private key from the user-specific key pair to create a 
target key verifier based on the target public key (column 4, lines 47-65); storing means 
for storing the target key verifier and the target public key (column 4, lines 47-65); 
retrieving means for retrieving the target key verifier and the target public key from the 
storage means (column 5, lines 4-15); verification means for applying a user-specific 
public key from the user-specific key pair to the target key verifier for verifying the 
authenticity of the target public key (column 4, lines 47-65). Wiegley teaches a data- 
encrypting step of encrypting data (column 4, lines 57-60) using a session key, and 
encrypting the session key using the printer's public key (column 4, lines 52-55). 
Wiegley does not expressly disclose data encrypting means for encrypting data with the 
target public key, in the case that the authenticity of the target public key is verified, 
thereby creating encrypted data for transmission to the target device. Therefore, it 
would have been obvious to one having ordinary skill in the art at the time the invention 
was made to encrypt the data using the printer's public key. One of ordinary skill in the 
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art would have been motivated to do so because it was well known in the art to use a 
receiver's public key to encrypt a message destined to said receiver. 

10. Claims 3-4 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Wiegley as applied to claim 2 above, and further in view of Lohstroh et al. (US 
Patent Number: 5,953,419). 

Regarding claim 3, Wiegley does not expressly disclose wherein the operating 
system securely maintains a user-specific key pair for each of a plurality of users of the 
computing device. However, Lohstroh et al. teach wherein the operating system 
securely maintains a user-specific key pair for each of a plurality of users of the 
computing device (column 23, lines 57-67, column 24, lines 1-11). Therefore, it would 
have been obvious to one having ordinary skill in the art at the time the invention was 
made to have the operating system maintain a key-pair associated with each user. One 
of ordinary skill in the art would have been motivated to do so to further control access 
to secure data (Lohstroh et al., column 4, lines 1-15). 

Regarding claim 4, the combination of Wiegley and Lohstroh et al. teaches the 
limitations as set forth under claim 3 above. Furthermore, Lohstroh et al. teach wherein 
each user-specific key pair can only be accessed by providing the operating system 
with user identification data corresponding to the user-specific key pair (column 23, lines 
57-67, column 24, lines 1-11). 
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11. Claims 16-18 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Wiegley as applied to claim 1 above, and further in view of Langford et al. 
(US Patent Number: 6,470,450). 

Regarding claim 16, Wiegley does not expressly disclose wherein the receiving 
step includes applying a hashing algorithm to the received target public key to obtain a 
received target key hash and using a hash verification algorithm to compare the 
received target key hash to a test target key hash for verifying the authenticity of the 
received target public key. However, Langford et al. teach a system that provides a 
computed hash value to an output interface and receives a response through an input 
interface, such as a keyboard (column 7, lines 50-67, column 8, lines 1-20) for a user to 
compare the displayed hash value to a trusted hash value. Therefore, it would have 
been obvious to one having ordinary skill in the art at the time the invention was made 
to compare a computed hash value of received data to a trusted hash value for verifying 
the authenticity of the received value. One of ordinary skill in the art would have been 
motivated to do so because it is well known in the art to verify authenticity of received 
data by using hash values (Langford et al., column 7, lines 60-67, column 8, lines 1-20). 

Regarding claim 17, the combination of Wiegley and Langford et al. teaches the 
limitations as set forth under claim 16 above. Furthermore, Langford et al. teach 
wherein the test target key hash is input by a user (column 7, lines 50-67, column 8, 
lines 1-20). 

Regarding claim 18, the combination of Wiegley and Langford et al. teaches the 
limitations as set forth under claim 17 above. Furthermore, the combination of Wiegley 
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and Langford et al. teaches wherein the target device is a printer (Wiegley, column 4, 
lines 30-45) and wherein the test target key hash is obtained from a test page printed by 
the printer (Langford et al., column 7, lines 56-60, a printer is a well known output 
interface). 

12. Claim 22 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Wiegley, and further in view of Lohstroh et al. 

Regarding claim 22, Wiegley teaches a receiving step of receiving a printer 
public key corresponding to a printer (column 4, lines 30-35); a first hashing step of 
applying a hashing algorithm to the printer public key to create a first printer key hash 
(column 5, lines 48-67, column 6, lines 1-50); an encryption step of applying an 
encryption algorithm to encrypt the first printer key hash with a user-specific private key 
from the user-specific key pair, thereby creating a printer key signature (column 5, lines 
48-67, column 6, lines 1-50); a storing step of storing the printer key signature and the 
printer public key in a storage area (column 4, lines 47-65); a retrieving step of retrieving 
the printer key signature and the printer public key from the storage area (column 5, 
lines 4-15); a second hashing step of applying the hashing algorithm to the retrieved 
printer public key to create a second printer key hash (column 6, lines 14-27); a 
decrypting step of applying a decryption algorithm to decrypt the printer key signature 
with a user-specific public key from the user-specific key pair, thereby retrieving the first 
printer key hash; a verification step of applying a verification algorithm to compare the 
first printer key hash with the second printer key hash, for verifying the authenticity of 
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the retrieved printer public key (column 6, lines 14-27). Wiegley teaches a data- 
encrypting step of encrypting data (column 4, lines 57-60) using a session key, and 
encrypting the session key using the printer's public key (column 4, lines 52-55). 
Wiegley does not expressly disclose a print data encrypting step of applying an 
encryption algorithm to print data using the retrieved printer public key, in the case that 
the authenticity of the retrieved printer public key is verified, . to create encrypted print 
data for transmission to the printer; nor an obtaining step of obtaining a user-specific 
key pair from a secure registry upon receipt of a corresponding user identification. 
However, Lohstroh et al. teach an obtaining step of obtaining a user-specific key pair 
from a secure registry upon receipt of a corresponding user identification (column 23, 
lines 57-67, column 24, lines 1-11). Therefore, it would have been obvious to one 
having ordinary skill in the art at the time the invention was made to encrypt the data 
using the printer's public key. One of ordinary skill in the art would have been motivated 
to do so because it was well known in the art to use a receiver's public key to encrypt a 
message destined to said receiver. 

13. Claim 23 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Wiegley, and further in view of Langford et al. 

Regarding claims 23, Wiegley teaches a first receiving step of receiving in the 
computing device a printer public key corresponding to a printer (column 4, lines 30-35); 
a hashing step of applying a hashing algorithm to the printer public key to create a first 
printer key hash (column 5, lines 48-67, column 6, lines 1-50); and a storing step of 
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storing, in the case that the authenticity of the received printer public key is verified in 
the verification step, the received printer public key in a memory area of the computing 
device (column 4, lines 30-46). Wiegley does not expressly disclose a second receiving 
step of receiving in the computing device a predetermined second printer key hash 
obtained from a test page printed by the printer, wherein the second printer key hash is 
input into the computing device by a user-input means connected to the computing 
device; a verification step of applying a verification algorithm to compare the first printer 
key hash with the second printer key hash, for verifying the authenticity of the received 
printer public key. However, Langford et al. teach a second receiving step of receiving in 
the computing device a predetermined second printer key hash obtained from a test 
page printed by the printer, wherein the second printer key hash is input into the 
computing device by a user-input means connected to the computing device (column 7, 
lines 50-67, column 8, lines 1-20); a verification step of applying a verification algorithm 
to compare the first printer key hash with the second printer key hash, for verifying the 
authenticity of the received printer public key (column 7, lines 50-67, column 8, lines 1- 
20). Therefore, it would have been obvious to one having ordinary skill in the art at the 
time the invention was made to compare a computed hash value of received data to a 
trusted hash value for verifying the authenticity of the received value. One of ordinary 
skill in the art would have been motivated to do so because it is well known in the art to 
verify authenticity of received data by using hash values (Langford et al., column 7, lines 
60-67, column 8, lines 1-20). 
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14. Claims 24-26 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Wiegley, and further in view of Lohstroh et al. and Langford et al. 

Regarding claims 24, the combination of Wiegley, Lohstroh et al., and Langford 
et al. teaches the limitations as set forth under claims 1-23 above. Furthermore, the 
combination of Wiegley, Lohstroh et al., and Langford et al. teaches computer readable 
medium a program memory for storing process steps executable to perform a method 
according to any of claims 1 to 23; and a processor for executing the process steps 
stored in said program memory (Wiegley, column 4, lines 1-67). 

Regarding claims 25, the combination of Wiegley, Lohstroh et al., and Langford 
et al. teaches the limitations as set forth under claims 1-23 above. Furthermore, the 
combination of Wiegley, Lohstroh et al., and Langford et al. teaches process steps 
executable to perform a method according to any of claims 1 to 23 (Wiegley, column 4, 
lines 1-67). 

Regarding claims 26, the combination of Wiegley, Lohstroh et al., and Langford 
et al. teaches the limitations as set forth under claims 1-23 above. Furthermore, the 
combination of Wiegley, Lohstroh et al., and Langford et al. teaches computer- 
executable process steps comprising process steps executable to perform a method 
according to any of claims 1 to 23 (Wiegley, column 4, lines 1-67). 

15. Claims 28, 30, 31, and 33 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Wiegley, and further in view of Young et al. (US Patent 
Number: 6,473,508). 
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Regarding claim 28, Wiegley teaches an information apparatus which transfers 
encrypted print data to a printer, the apparatus comprising: retrieving means for 
retrieving a public key from said printer (column 3, lines 62-67, column 4, lines 30-35); 
generating means for generating verification information from the public key (column 5, 
lines 48-67, column 6, lines 1-50); recognizing means for recognizing a printing 
instruction (column 2, lines 40-56). Wiegley does not disclose expressly verification 
means for verifying, in response to the recognition of the printing instruction, that the 
public key is not changed from the retrieved public key; and control means for 
controlling encryption processing which is performed by using said public key when the 
retrieved public key is verified as unchanged, and which is not performed when the 
retrieved public key is verified as changed. However, Young et al. teach verification 
means for verifying, in response to the recognition of the printing instruction, that the 
public key is not changed from the retrieved public key (column 9, lines 22-36); and 
control means for controlling encryption processing which is performed by using said 
public key when the retrieved public key is verified as unchanged, and which is not 
performed when the retrieved public key is verified as changed (column 9, lines 22-36). 
Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to verify the public key of a sender at a receiving end (the 
printer sending its public key to the information apparatus) and based on this verification 
process, proceed accordingly (encrypt data and send it to the printer). One of ordinary 
skill in the art would have been motivated to do so because it was well known in the art 
to verify the authenticity of a received message (Young et al., column 9, lines 32-36). 
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Regarding claim 30, the combination of Wiegley and Young et al. teaches the 
limitations as set forth under claim 28 above. Furthermore, Young et al. teach wherein 
said control means controls the encryption processing to encrypt the print data by using 
a user specific key obtained by an obtaining means and to encrypt the user specific key 
by using the public key (column 9, lines 22-36). 

Regarding claim 31, Wiegley teaches an information processing method for 
transferring encrypted print data to a printer, the method comprising: a retrieving step of 
retrieving a public key from said printer (column 3, lines 62-67, column 4, lines 30-35); a 
generating step of generating verification information from the public key (column 5, 
lines 48-67, column 6, lines 1-50); a recognizing step of recognizing a printing 
instruction (column 2, lines 40-56). Wiegley does not disclose expressly a verification 
step of verifying, in response to the recognition of the printing instruction, that the public 
key is not changed from the retrieved public key; and a control step of controlling 
encryption processing which is performed by using said public key when the retrieved 
public key is verified as unchanged, and which is not performed when the retrieved 
public key is verified as changed. However, Young et al. teach a verification step of 
verifying, in response to the recognition of the printing instruction, that the public key is 
not changed from the retrieved public key (column 9, lines 22-36); and a control step of 
controlling encryption processing which is performed by using said public key when the 
retrieved public key is verified as unchanged, and which is not performed when the 
retrieved public key is verified as changed (column 9, lines 22-36). Therefore, it would 
have been obvious to one having ordinary skill in the art at the time the invention was 
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made to verify the public key of a sender at a receiving end (the printer sending its 
public key to the information apparatus) and based on this verification process, proceed 
accordingly (encrypt data and send it to the printer). One of ordinary skill in the art 
would have been motivated to do so because it was well known in the art to verify the 
authenticity of a received message (Young et al., column 9, lines 32-36). 

Regarding claim 33, the combination of Wiegley and Young et al. teaches the 
limitations as set forth under claim 31 above. Furthermore, Young et al. teach wherein 
said control step controls the encryption processing to encrypt the print data by using a 
user specific key obtained by an obtaining step and to encrypt the user specific key by 
using the public key (column 9, lines 22-36). 

16. Claims 29 and 32 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Wiegley and Young et al. as applied to claims 28 and 31, respectively above, 
and further in view of Langford et al. 

Regarding claim 29, the combination of Wiegley and Young et al. does not 
expressly disclose obtaining means for obtaining a user specific key stored in a 
computer; input means for inputting authentication information; and determining means 
for determining whether to allow the obtaining means to obtain the user specific key. 
However, Langford et al. teach obtaining means for obtaining a user specific key stored 
in a computer (column 5, lines 56-67, column 6, lines 1-29); input means for inputting 
authentication information (column 5, lines 56-67, column 6, lines 1-29); and 
determining means for determining whether to allow the obtaining means to obtain the 
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user specific key (column 5, lines 56-67, column 6, lines 1-29). Therefore, it would have 
been obvious to one having ordinary skill in the art at the time the invention was made 
to authenticate user access to a user specific key. One of ordinary skill in the art would 
have been motivated to do so to protect user information (Langford et al., column 1, 
lines 35-65). 

Regarding claim 32, the combination of Wiegley and Young et al. does not 
expressly disclose an obtaining step of obtaining a user specific key stored in a 
computer; an input step of inputting authentication information; and a determining step 
of determining whether to allow the obtaining step to obtain the user specific key. 
However, Langford et al. teach an obtaining step of obtaining a user specific key stored 
in a computer (column 5, lines 56-67, column 6, lines 1-29); an input step of inputting 
authentication information (column 5, lines 56-67, column 6, lines 1-29); and a 
determining step of determining whether to allow the obtaining step to obtain the user 
specific key (column 5, lines 56-67, column 6, lines 1-29). Therefore, it would have been 
obvious to one having ordinary skill in the art at the time the invention was made to 
authenticate user access to a user specific key. One of ordinary skill in the art would 
have been motivated to do so to protect user information (Langford et al., column 1, 
lines 35-65). 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David G. Cervetti whose telephone number is (571) 272- 
5861. The examiner can normally be reached on Monday-Friday 7:00 am - 5:00 pm, off 
on Wednesday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on (571) 272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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